Comment by ktallett

One risk of open source development and development in public is that anyone can take part, hence appropriate management of merge is key. Therefore automated services without appropriate strategies to mitigate this are probably not useful. I am curious did these contributors actually make any malicious changes?